Cisco CCNP Enterprise 300-425 Questions & Answers

• Question 111:

  Refer to the exhibit.

  

  An engineer is about to establish a mobility peer connection between a Cisco Catalyst 9800-CL version 16.10.1e and Cisco AireOS 5520 version 8.8.120.0. The data path between the 9800-CL and AireOS 5520 is down, but its control path is up. Based on the configuration, what is the cause of the issue?

  A. The certificate hash key is incorrect leading to data path down.

  B. The data-link-encryption configuration is missing from the 9800-CL configuration.

  C. Encrypted mobility is being used in the 5520 configuration leading to data path down.

  D. CAPS is used to key in MAC address in the IOS_XE configuration leading to data path down.

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213913-building-mobility-tunnels-on-catalyst-98.html#anc9

• Question 112:

  A wireless engineer must design mobility between two buildings at a campus site. The engineer has one controller at each site. The engineer is investigating inter-controller CAPWAP data and control traffic. Which two ports must be open? (Choose two.)

  A. 5246

  B. 5247

  C. 8443

  D. 16666

  E. 16667

  Correct Answer: CD

• Question 113:

  An engineer has designed an anchor redundancy for guest clients connecting to SSID with auto-anchor configured. After adding a second Anchor WLC under the SSID mobility anchor list, clients are load-balanced between existing and new anchors instead of having one anchor as active and the other one as standby. Which feature should be included in the design that will be configured on the WLC running 8.1 or above to ensure anchor redundancy?

  A. Auto-Anchor Foreign Mapping

  B. AP groups

  C. Guest Anchor Priority

  D. 802.11r

  Correct Answer: C

• Question 114:

  Refer to the exhibit.

  

  An engineer determined that during a recent controller failure, some APs did not failover to their secondary controller based on the network design, which has sufficient licenses for all APs. The controllers are not in a mobility group but have A records for their hostnames in DNS. Which setting needs to be addressed?

  A. The controllers must be in the same mobility group.

  B. The secondary controller IP address is incorrect.

  C. DNS hostnames are required to be FQDN.

  D. The AP failover priority was not set high enough.

  Correct Answer: D

• Question 115:

  Refer to the exhibit.

  

  An enterprise has offices spread around the globe. The APs are connected to different controllers installed in separate datacenters. The IT team wants to allow clients to roam from controllers in group ABC to controllers in group XYZ. Which feature must be incorporated in the design to accomplish this task?

  A. switch peer group

  B. workgroup bridge

  C. mDNS gateway

  D. mobility lists

  Correct Answer: D

• Question 116:

  Refer to the exhibit.

  

  A WLC SSO pair is set up. Which failure scenario causes a split-brain scenario?

  A. RP is down.

  B. Two distribution ports on the active WLC are down.

  C. VSL is down.

  D. One distribution port on the active WLC is down.

  Correct Answer: C

• Question 117:

  An engineer must repurpose a lab WLC appliance for use in the production environment of the enterprise. After the new WLC is configured with the information of the other WLC, the mobility tunnels are still not coming up. What is the reason?

  A. A firewall is blocking UDP port 16667 between the WLCs.

  B. The WLC management interfaces are in the same VLAN.

  C. The hardware platform is incompatible.

  D. The mobility groups are different.

  Correct Answer: A

• Question 118:

  A network engineer is troubleshooting connectivity issues between two WLCs running 8.x code in SSO mode and finds that the redundancy management heartbeat is failing. Which packet type must be filtered for heartbeats when taking a capture to verify communication?

  A. RSTP

  B. UDP

  C. TCP

  D. ICMP

  Correct Answer: B

• Question 119:

  A customer has multiple WLCs running N+1 redundancy with APs equally distributed. Only one WLC is a designated backup for all other WLCs so the customer must ensure that the most critical APs remain registered or get priority over other APs in case of a WLC failure. However, the customer notices on WLC failure that some critical APs remain unregistered What needs to be addressed in the design?

  A. AP fallback is not enabled on the backup WLC.

  B. AP failover priority is not enabled globally on the backup WLC.

  C. AP failover priority is not enabled globally on the failed WLC.

  D. AP fallback is not enabled on the failed WLC.

  Correct Answer: B

• Question 120:

  WLC SSO is set up between two WLCs in a service provider network serving public spaces. On WLC failover, it is noticed that only about half of the original client count is now showing on the secondary WLC, although it is currently showing the role as active. Which design side case explains the issue?

  A. The secondary WLC platform does not support the required client count.

  B. The WLCs had not completed database sync before the primary failure.

  C. SSO is not configured correctly.

  D. Some client sessions were in WebAuth-Req state before failover.

  Correct Answer: D